Sr. Security and Compliance Engineer

Qcells North America; San Francisco (CA); Hybrid; USD 122,000 - 152,000; Full time

Job summary

Qcells North America is seeking a hands-on Senior Security and Compliance Engineer to lead cloud security, governance, risk, and compliance across the organization. The role focuses on monitoring threats, incident response, risk remediation, and maintaining security technologies with alignment to internal policies and industry standards.

This position is based in Irvine, CA; San Francisco, CA; or Teaneck, NJ, with in-office schedule at the manager’s discretion.

Qualifications

• Bachelor's degree in information security, Computer Science, or a related field, or equivalent experience, with 5+ years in cybersecurity, cloud security, security operations, governance, risk, compliance, or a similar role.
• Strong knowledge of cloud security concepts such as IAM, security groups, VPC, encryption (at‑rest and in‑transit), and cloud monitoring.
• Strong understanding of compliance frameworks and audit practices, including FFIEC, SOX, SOC 2, ISO 27001, control testing, evidence collection, and remediation tracking.
• Experience with incident response, vulnerability remediation, risk assessments, compliance reviews, logging, alerting, forensic investigation, and executive reporting in cloud environments.

Responsibilities

• Develop and maintain the information security and compliance strategy, roadmap, policies, standards, and control framework.
• Lead and support continuous improvement projects to deploy, consolidate, enhance, and/or secure enterprise IT systems and services.
• Lead security and compliance operations, including threat detection, incident response, vulnerability remediation, forensics coordination, control monitoring, and compliance reporting.
• Ensure proper back up and disaster recovery are in place and proactively monitored to achieve SLAs for RPO and RTO.
• Ensure alignment with cybersecurity, privacy, technology control, and audit requirements, including FFIEC, SOX, SOC 2, ISO 27001, and other applicable obligations.

Skills

Cloud security

Incident response

Governance & compliance

Security operations

Threat monitoring

Education

Bachelor's degree in information security, Computer Science, or related field

Tools

SIEM

Cloud monitoring

Job description

POSITION DESCRIPTION:

Qcells is looking for a hands‑on senior security and compliance professional to lead cloud security, security operations, governance, risk, and compliance activities across the organization. The Sr. Security and Compliance Engineer will help safeguard IT assets by monitoring threats, responding to incidents, remediating risks, maintaining security technologies, and ensuring alignment with internal policies and applicable compliance frameworks.

Description

Qcells is looking for a hands‑on senior security and compliance professional to lead cloud security, security operations, governance, risk, and compliance activities across the organization. The Sr. Security and Compliance Engineer will help safeguard IT assets by monitoring threats, responding to incidents, remediating risks, maintaining security technologies, and ensuring alignment with internal policies and applicable compliance frameworks.

This position will be based out of one of our offices in Irvine, CA; San Francisco, CA; or Teaneck, NJ, with an in‑office schedule set at the direct manager’s discretion in accordance with company policies and procedures. Remote options are available for exceptional cases.

Responsibilities

• Develop and maintain the information security and compliance strategy, roadmap, policies, standards, and control framework.
• Lead and support continuous improvement projects to deploy, consolidate, enhance, and/or secure enterprise IT systems and services.
• Lead security and compliance operations, including threat detection, incident response, vulnerability remediation, forensics coordination, control monitoring, and compliance reporting.
• Ensure proper back up and disaster recovery are in place and proactively monitored to achieve service level agreements (SLAs) for Recovery Point Objective (RPO) and Recovery Time Objective (RTO).
• Ensure alignment with cybersecurity, privacy, technology control, and audit requirements, including FFIEC, SOX, SOC 2, ISO 27001, and other applicable obligations.
• Monitor and secure cloud environments (e.g., Azure, AWS, Salesforce) using security information and event management (SIEM) tools, and cloud‑native security solutions.
• Investigate and respond to security incidents, ensuring proper containment, remediation, and documentation of root causes.
• Design and mature security and compliance controls for secure architecture, IAM, data handling, audit readiness, and risk management.
• Support Qcells NA’s ISMS through control evidence, risk treatment, audit readiness, corrective actions, and continuous improvement.
• Partner with IT, Legal, Privacy, vendors, and business teams on security requirements, policy exceptions, and compliance remediation.
• Evaluate, recommend and implement new solutions that enhance security posture.
• Oversee end‑users access management throughout the organization. Conduct and assist with regularly scheduled user access reviews in active directory and other applications as needed.
• Execute periodic FinTech risk assessments and comprehensive security awareness programs, ensuring employees adhere to best practices and regulatory security requirements.
• Stay current with emerging security trends, threats, and technologies to continuously improve security strategies.
• Collaborate with IT and development teams on security best practices.
• Operate in a manner demonstrating a high level of integrity, ethics, and discretion when handling sensitive and confidential information.

Required Qualifications

• Bachelor's degree in information security, Computer Science, or a related field, or equivalent experience, with 5+ years in cybersecurity, cloud security, security operations, governance, risk, compliance, or a similar role.
• Strong knowledge of cloud security concepts such as IAM, security groups, VPC, encryption (at‑rest and in‑transit), and cloud monitoring.
• Strong understanding of compliance frameworks and audit practices, including FFIEC, SOX, SOC 2, ISO 27001, control testing, evidence collection, and remediation tracking.
• Experience with incident response, vulnerability remediation, risk assessments, compliance reviews, logging, alerting, forensic investigation, and executive reporting in cloud environments.

Preferred Qualifications

• Strongly Preferred: CCSP (Certified Cloud Security Professional), CISSP (Certified Information System Security Professional), CISM (Certified Information Security Manager), CompTIA A+, CompTIA Security +.
• Strong understanding of FinTech security compliance and principles, and implementation in cloud environments.

Compensation

In accordance with applicable pay transparency laws, the anticipated annual base salary for this position is:

• Zone 1 (Bay Area, NYC): $146,200 – $182,600
• Zone 2 (CA, NJ, NY): $134,000 – $167,400
• Zone 3 (All others): $121,800 – $152,200

The applicable salary range is based on the employee’s primary work location. Individual compensation will be determined based on qualifications, relevant experience, education, skills, internal equity, and other business‑related factors.

Hanwha Q CELLS America Inc. (“HQCA”) is a Qcells company, one of the world’s largest manufacturers and providers of solar photovoltaic (PV) products and solutions. Headquartered in Irvine, California, HQCA has been rapidly expanding its business in North America through the expansion of products and solutions, including distributed energy solutions, direct‑to‑homeowner solar sales and financing, and EPC services. We provide an opportunity to be part of an exciting and growing world‑class global business in an interesting and expanding industry of the future.

Physical, Mental & Environmental Demands

Mobility
Standing
20% of time
Sitting
70% of time
Walking
10% of time
Strength
Pulling
up to 10 Pounds
Pushing
up to 10 Pounds
Carrying
up to 10 Pounds
Lifting
up to 10 Pounds
Dexterity(F = Frequently, O = Occasionally, N = Never)
Typing
F
Handling
F
Reaching
F
Agility(F = Frequently, O = Occasionally, N = Never)
Turning
F
Twisting
F
Bending
O
Crouching
O
Balancing
N
Climbing
N
Crawling
N
Kneeling
N

The salary range is required by the California Pay Transparency Act and may differ depending on the location of those candidates hired nationwide. Actual compensation is influenced by a wide array of factors including but not limited to, skill set, education, licenses and certifications, essential job duties and requirements, and the necessary experience relative to the job’s minimum qualifications.

• This target salary range is for CA positions only and should not be interpreted as an offer of compensation.

You may view your privacy rights by reviewing Qcells' Privacy Policy or by contacting our HR team for a copy.